15 matches found
CVE-2026-62971
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...
CVE-2026-62971 OWASP CRS: XML Attribute Value Bypass
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...
EUVD-2026-123614
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...
CVE-2026-62971: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...
PT-2026-145302
The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.10, 4.25.1, and 4.28.0, CRS rules in the 921 protocol-attack, 930 LFI, 931 RFI, 932 RCE, 933 PHP, 934 generic, 941 XSS, 942 SQLi, and 943 session-fixatio...
Malicious code in elf-stats-snuggly-rocket-941 (npm)
Source: amazon-inspector 8ec7ceb7fb43388fe1fdad9e30686d5023d591e8c7d041d9c05d299158cbae29 The package elf-stats-snuggly-rocket-941 was found to contain malicious code. --- Credit: OpenSSF source...
VoiceTra vulnerable to incorrectly specified destination in a communication channel
Overview VoiceTra provided by National Institute of Information and Communications Technology NICT contains the following vulnerability. Incorrectly specified destination in a communication channel CWE-941 - CVE-2026-72506 RyotaK of GMO Flatt Security Inc. reported this vulnerability to NICT and...
EUVD-2025-200802
Malicious code in elf-stats-snuggly-rocket-941 npm...
Malicious code in elf-stats-snuggly-rocket-941 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec7ceb7fb43388fe1fdad9e30686d5023d591e8c7d041d9c05d299158cbae29 The package elf-stats-snuggly-rocket-941 was found to contain malicious code...
MAL-2025-192150 Malicious code in elf-stats-snuggly-rocket-941 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec7ceb7fb43388fe1fdad9e30686d5023d591e8c7d041d9c05d299158cbae29 The package elf-stats-snuggly-rocket-941 was found to contain malicious code...
Amazon Linux AMI : docker (ALAS-2018-941)
Lack of content verification in Docker-CE Also known as Moby versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka gzip bombing. CVE-2017-14992 C Tenable...
Debian DLA-941-1 : squirrelmail security update
Dawid Golunski and Filippo Cavallarin discovered that squirrelmail, a webmail application, incorrectly handled a user-supplied value. This would allow a logged-in user to run arbitrary commands on the server. For Debian 7 'Wheezy', these problems have been fixed in version...
Ubuntu: Security Advisory (USN-941-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
sip-pwn.txt
SIP, the IETF endorsed VoIP signaling protocol, is currently used to establish and manage VoIP calls. Many security issues have been addressed until know about the security of VoIP due to the large numbers of attacks coming from the traditional IP networks, but none have addressed the securing th...
